<!DOCTYPE html>
<html>
  <body><a href="javascript:hello('${xss(input, "js", "uri", "html")}')"></a>
  </body>
</html>